Support secrets_manager_secret_id without granting enable_bastion_terraform_permissions

[willswire]

terraform-aws-bastion/iam.tf

Line 192 in bcc399b

"secretsmanager:GetSecretValue"

Currently, setting the secrets_manager_secret_id in the module will fail if enable_bastion_terraform_permissions is not true, and policy_content does not include something like:

  policy_content = jsonencode({
    "Version" : "2012-10-17",
    "Statement" : [
      {
        "Effect" : "Allow",
        "Action" : "secretsmanager:GetSecretValue",
        "Resource" : "arn:aws-us-gov:secretsmanager:*:*:secret:${secrets_manager_secret_id}-??????"
      }
    ]
  })

Perhaps the module should auto include that policy?